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Abstract 

We consider entropic uncertainty relations for outcomes of the mea- 
surements of a quantum state in 3 or more mutually unbiased bases 
(MUBs), chosen from the standard construction of MUBs in prime di- 
mension. We show that, for any choice of 3 MUBs and at least one choice 
of a larger number of MUBs, the best possible entropic uncertainty rela- 
tion can be only marginally better than the one that trivially follows from 
the relation by Maassen and UfRnk (PRL, 1987) for 2 bases. 

1 Introduction 

Uncertainty relations quantify the amount of uncertainty in the outcomes 
of quantum measurements. The most famous uncertainty relation is due 
to Heisenberg [IT] who showed that either the position or the momentum 
of the particle has at least a certain amount of uncertainty. 

For finite-dimensional state spaces, the uncertainty relations are most 
often stated in terms of the entropy of the measurement outcomes [U [HI 
I13II141[T5] . Entropic uncertainty relations have several applications, from 
locking information in quantum states [5] to quantum cryptography in 
the bounded-storage model [7]. (For more details on those, we refer the 
reader to the survey by Wehner and Winter [18j.) 

Let Pi,P2 be the probability distributions obtained by measurements 
with respect to two orthonormal bases Mi,M2 and let c be the maximum 
of |{'!/'i|'(/'2)|, over all \^{) from Ali and IV'2) from Then, as shown 

by Maasen and UfRnk [15]. 

Ji-(Pi) + H(P2) > -21ogc. (1) 

The lower bound is maximized if A^i and M2 are mutually unbiased. 
Then KV'ilV'a)! = and we get a lower bound of log A'' on the sum of 
the two entropies. This bound is optimal: if we measure a state |?/>) from 
one of the bases, the outcome has an entropy of in that basis and an 
entropy of log A'^ in the other basis. 
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In contrast, when we try to quantify the sum of entropies for three or 
more bases, fairly httle is known. Most of the research on this subject 
considers the case when each two of the measurement bases are mutualfy 
unbiased. 

There are two known constructions of mutually unbiased bases (MUBs). 
The first and the most commonly used construction is based on general- 
ized Pauli matrices [21l[2]. The second construction [20] is based on Latin 
squares. 

For either of those constructions, we trivially have 

H(Pi) + ... + HiPk)>^logN, (2) 

which follows from dividing the bases into pairs and applying ([T]) to each 
pair. Better bounds are known for the case when the number of mea- 
surement bases is large (i.e. we use the full collection of d -I- 1 MUBs in 
dimension d or a large subset of it [121 1151 \16\). But, for the case when 
we consider a small number of measurements, only two partial results are 
known, one for each of the two constructions of MUBs. 

For the first construction, computer simulations by DiVincenzo et al. 
[5] (for the number of bases k from 3 to 29) indicate 

H{Pi) + ... + H(Pk) ~ cfclogiV, 

with c scaling as 1 — -i where e is between 0.10 and 0.15. For the second 
construction, Ballester and Wehner [1] show that ((2} is essentially optimal 
and no better bound can be achieved, even when we use the maximum 
number of MUBs provided by the Latin square construction. 

Thus, it seems that the two constructions display a significantly dif- 
ferent behaviour: one provides better and better uncertainty relations as 
we increase the number of bases (which is good for applications such as 
locking of correlations in quantum states [^) while the second does not. 

In this note, we provide some new results which show that the first 
constructions of MUBs also fails to give better uncertainty relations in 
some situations: 

1. For any 3 bases from this construction, we can find a state \tp) with 

H{Pi) + HiPi) + HiPs) < (^+0(1)) logiV. 

Thus, the trivial bound ((2} is nearly tight in this case. 

2. For any < n", we can select k MUBs in dimension n so that 

i?(Pi) + . . . + i/(Pfe) < (l + e + o(l))|logiV. 

Our results do not rule out the possibility of good uncertainty relations 
for fc > 4 MUBs but indicate that a careful choice of the set of MUBs may 
be necessary to obtain such relations. 
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2 MUBs in prime dimensions 



In this section, we first describe the Wootters-Fields [21) construction of 
mutually unbiased bases and then analyze its symmetry properties. The 
results on symmetry properties will be used to prove our bound on entropic 
uncertainty relations for 3 MUBs in section [5711 

The Wootters and Fields [2T] construction for prime dimension p is 
as follows. The first MUB, Mc, just consists of the computational basis 
states |0), |1), . . ., \p— 1). The other p MUBs are denoted Mo, ■ ■ ■, Mp-i, 
with Mj consisting of states \ipj,o), ■ ■ ■, \4'j,p-i) defined by 

IS{0,l,...,p-l} 

where w = e^""'^". 

We say that two triplets of MUBs {M'l, M'2, M3) and {M'{, M", 
M'i') are equivalent if there is unitary U that maps M'l, M'2, M3 to M", 
M2, M'-i (in some order). 

Lemma 1 Let d be the smallest quadratic nonresidue mod p. Any set 
of 3 different MUBs selected from Mc, Mo, . . ., Mp-i is equivalent to 
either the set Mc, Mo, Mi or the set Mc, Mo, Md- 

Proof: Let M'i_,M'2,M's be three different MUBs (selected from Mc, 
Mo, ■ ■ ■, Mp-\). We consider the following two unitary transformations 
that permute the MUBs: 

.2 

• The unitary transformation W\l) — w \l) leaves Mc unchanged and 
maps Mj (j G {0, 1, . . . ,p - 1}) to M(j+i) ^odp- 

• Quantum Fourier transform 

maps Mc and A^o one to another and permutes Mi, . ■ ■ ,Mp-i in 
some way. 

We can map Al'i, M'2, M'3 to Mc, Mo a,nd Mk (for some fe e {0, 1, . . . ,p— 
1}) as follows: 

1. We repeatedly apply W until one of M'i is mapped to Mo- 

2. We then apply F, mapping Mo to Mc- 

3. We then repeatedly apply W until one of the other MUBs is mapped 
to Mo- 
Next, let a e {1, . . . ,p— 1}. Define Ua\j) ~ mod p) (where 

is the inverse of a in Zp). The transformation Ua leaves Mc unchanged 
(permuting the basis states in this basis). For the basis Mj, we have 

Ua\tpj,k) = ^ [{a"^ I) mod p) = 

ie{o.i,...,p-i) 
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7 ^ 10 — I^{a2j) mod p,(afe) mod p)- 

ie{o,i p-i} 

Thus, the basis A4j is mapped to M(^2j) modp- In particular, this means 
that A^o is mapped to itself. 

If we have a set Mc, -Mo, Mj with j being a quadratic residue, then 
is a quadratic residue as well. Let a be a solution of a;^ = modp). 
Then, Ua leaves Mc and Mo unchanged and maps Mj to M(„2j) p = 
Ml. 

If we have a set A4c, -Mo, -Mj with j being a quadratic nonresidue, 
then is a quadratic non-residue and j~^d is a quadratic residue (mod- 
ulo a prime, a product of two quadratic non-residues is a quadratic residue). 
Let a be a solution of = j~^d{mod p). Then, Ua leaves Mc and Mo 
unchanged and maps Mj to Af(„2j) ^ = Aid- | 

Lemma 2 The sets of MUBs Mc, Mo, Mi and Mc, Mo, Md are equiv- 
alent if and only if the pnme p is of the form p — 4k + 3, k £ Z. 

Proof: If p = 4fc -I- 3, then -1 is a quadratic non-residue mod p 19'. As 
shown in the proof of Lemma [T] Mc, Mo, Md is then equivalent to A^c, 
Mo, M-i. Applying the unitary transformation W from Lemma [T] maps 
Mc,Mo,M-i to Mc, Ml and A4o. 

Next, we consider the case when p = 4fe + 1. Then, -1 is a quadratic 
residue [15]. We first show 

Claim 1 Assume that -1 is a quadratic residue mod p. Then, any per- 
mutation of Mc, Mo and Ml can be implemented by a unitary transfor- 
mation. 

Proof: It suffices to show that we can implement the following two per- 
mutations: 

Mc Mo, Mo Mc,Mi Ml 

Mc Mc,Mo Ml, Ml Mo 
because any permutation can be expressed as a product of those. Those 
two transformations can be implemented as follows: 

1. The quantum Fourier transform F transforms bases in a following 
way: F{Mc) = Mo, F(Mo) = Mc, F{Mi) = Ma where a is the 
unique element of {0, 1, ... ,p — 1} satisfying 4a = — l(mod p). We 
can then transform these bases to Mo, Mc, M-i by applying the 
transformation U2 defined in the proof of Lemma [T] 

Since —1 is a quadratic residue mod p, there exists x such that x^ = 
— l(mod p). Applying Ux maps Mo,Mc,M-i to Mo,Mc,Mi. 

2. We first apply f/o; mapping Ale, A^o, All to >1c, A1o,A1-i. Wethen 

apply U\l) = e which maps those to Mc, Mi, Mo- 

Therefore, if we have a unitary transformation U that transforms 
Mc,Mo,Mi to Mc, Mo, Md, we can assume that it implements the 
following map 

Mc Mc,Mo Mo, Ml Md- 
Since U fixes Mc, U is of the form 

U\i) ^X{i)\f{{)), 
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where /(O), . . . , f{p — 1) is a permutation of 0, ... ,p — 1 and A(i) are 
complex numbers of absolute value 1. Without a loss of generality, we can 
assume that A(0) = 1. The other A(i) all must be powers of w (otherwise, 
vectors in A^o (whose coefficients are powers of w) would not be mapped 
to vectors in A4o)- Let 

U\0) = \io),U\l) =^0"']^). (3) 
We claim that this implies 

U\j)^w'"\io+jih-to)). (4) 
To show that, we first assume 

U\j) ^w'^lz,). 

We consider the state \ipo,o) = X/f^o^ "73 which belongs to the basis 
Mo- ft must get mapped to a state in Mo and the only possibility that 
is consistent with ([3]) is 

U\i^o,o} = w~'"'°\^o,k} 
where k = 7^-^ (with all operations modulo p). Then, we must have 

U\j)=w''^''-^°'>\t,). (5) 

Similarly, the state \ipo,i) = X^r^o ^1*^ must also get mapped to a state 
in A^o and the only possibility consistent with Q is 

U\M=^~''''°\^o,k')- 
where k' — -^lii. Then, we must have 

Ulj)^^>''(^.-^o)-,^^^y (6) 

Since ij must have the same coefficients in ([5]) and ((6|, we have 
fci . ki + 1 

-[ij - Jo) = -{ij - 10) - J 



ii —10 n — 10 

and 

ij — io 
J = 

ii — to 

which is equivalent to ij = io + j{ii — io)- The coefficient of \ij) in ((5]) is 

zn) . (ij —in) k-i j 

This implies 

Next, a transformation of the form Q can be expressed as a product 
of three transformations: 

1. \j) — > w''-'\j) for some b G {0, f, . . . ,p — f}; 

2. \j) — >■ \cj) for some c G {f , . . . ,p — f}; 

3- Ij) ^ Ii + d) for some d G {0, 1, . . . ,p — f}. 
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The second transformation maps Mi to Mc^. The first and the third 
transformation just permute the vectors within each Mi. Therefore, we 
can map Mi to M^2 but not to Aid where d is a quadratic non-residue. 

I 

For our result, we also need an upper bound on the smallest quadratic 
non-residue d. It is known that: 

• If p = 8fc -f 5, fc-integer, then d — 2. 

• For p — 8k + l, then d = 0(log^ p) for all p, assuming the generalized 
Riemann hypothesis is true 19 . 

• Although d is small for most primes p, no good bound without the 
use of GRH is known [lOl [17] 



3 Limit on entropic uncertainty relations 

3.1 Measurement in 3 bases 

As shown in the previous section, any set of 3 MUBs is equivalent to 
Mc,Mq,Mi or Mc, Mo, Md- We first consider the case of measurements 
Mc,Mo,Mi. 

Theorem 1 Let E{tp) be the average of the entropies of probability distri- 
butions obtained by measuring tp m the bases Mc,Mo,Mi. There exists 
a state such that 

EW < i logp + i log logp -I- c 

for some constant c. 

Proof: Let \tP) = J2T^o^ b')' ^here 



47r log p 



(7) 



Measuring \tp) in A^c produces one of values 0, 1, . . . , m — 1 with proba- 
bility i each. This probability distribution has the entropy of log m. 

Lemma 3 Measuring in Mo produces a probability distribution with 
an entropy of at most logp — logm -I- 10. 

Proof: Let |A;| = min(fc,p— k). Measuring in A^o gives the value k 
with probability 

_ 2 
1 ' "' 



/mp 



m — l 

e p 

3=0 

4 



2 

1 


e p — 1 


mp 


2iTi!^ , 

e p — 1 



< 



mp 



TT^P 

Wrn' 



11 > 



(8) 



being true for all 



where the last inequality follows from je*' 
X G [— vr, tt]. 

Let t = r^^l • Let S be the set of all k with \k\ < t and let Si (for 
i = 0, 1, . . .) be™the set of all k with 2H < \k\ < 2^+4. 
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Claim 2 Let pi be the probability of measuring k G Si. Then, 

P> < 

Proof: If |fc| > 2H, the probability ((8]) is at most • Since there are 

2'^^t values k £ Si, we have 

with the last inequality following from the definition of t. | 
This claim also implies that 



00 ^ 1 



2' 

i 1=0 

The entropy of the probability distribution of outcomes of A4o is 
upper-bounded by the entropy of the probability distribution in which 
each element of Si has a probability and each element of S has a 
probability where po = 1 — X/i>i P'-- ^^'^ entropy of this probability 
distribution is 

-|5|^log^-)_^|S,|^log^ = 

, Po , Pi 

-Po log ^ - 2^P! log ^ = 

i>JO 

(PologlS"! + ^pilog |S,|) - (pologpo + logPO- 

Since \S\ < 2t and \Si\ < we can upperbound the first component 

by 

po(l + logt) + ^p,(i + l + logt) = (l + logi) + ^Pii 



<(l + logt) + ^-ljj<logt + 



i>0 



i>0 

3 



For the second component, we have 

-(po logpo + P, logpO < log ^ - E ^ ^ < ^ + E - 2- 

i>io i>2 i>2 

Therefore, the entropy is at most 

7 

log i + - < log m — logp + 10, 

with the last inequality following from the definition of t. | 

Lemma 4 Assume that < 4^ ^ ■ Let Ho and Hi be the entropies 
of the probability distributions obtained by measuring \tp} in Mo and Mi. 
Then, 

Hi < Ho + 1. 
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Proof: Measuring \il>) = X/j^o ^^'^ basis Mi produces the same 

probability distribution as measuring = — ^ ^-^o ^~ ^^^^ 
basis Alo- We have 

, -2^>4 _ 1| < 27r^. 

P 

Therefore, \\^p — ip'W < 2irmaxj ^ = Stt^. The variational distance 
between the probability distributions obtained by measuring It/j) and \^') 
is at most 2\\^ — tf}'\\ < Att^. Because of the definition of m, this is at 
most Lemma H] now follows from the lemma below. 

log p ■— ' 

Lemma 5 Let P, P' be probability distributions over a p element set 
and \P- P'\ < 5. Then, 

\HiP) ~ H{P')\ < H{5) + Slog{p~ 1). 

By combining all the bounds on the entropies (the trivial log m bound 
on the entropy of the measurement in Ale, Lemma |3] and Lemma |4]), the 
average of entropies must be at most 

2 1 

glogp- -logm + 7 + o(l). 

Substituting (O instead of m completes the proof of the theorem. | 

For the case when the set of 3 MUBs consists of A4,A4o and Md, a 
similar proof gives 

E{ip) < ^logp+ iloglogp+ ilogd + c. 
(The main difference is that we have to take 

y 47rdlogp 

instead of ([7]) As discussed at the end of section [S] generalized Riemann 
hypothesis (GRH) implies d = O(log^p) and logd < 21oglogp + 0(1) for 
all p. Thus, we have 

Theorem 2 Let M'l, M2, M'3 be an arbitrary subset of Ma, Mq, 
Mp-i- Let E{tp) be the average of the entropies of probability distributions 
obtained by measuring tp in M'o, M'l, M'2- we have: 

1. If p IS not of the form p — 8k + 1, there exists a state \tp} such that 

E{rp) < i logp + i log logp + c 

for some constant c. 

2. If p = 8k + 1 and GRH is true, there exists a state \tp) such that 

Eitp) < i logp + i log logp + c 
for some constant c. 
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3.2 Measurement in a larger number of bases 

Theorem 3 Let E{tp) be the average of the entropies of probability distri- 
butions obtained by measuring tp m the bases Mc,Mo, ■ ■ ■ , -^^[p«j • There 
exists state ji/') such that 

EW < -^-^ logp + o(logp) 

for some constant c. 

Proof: As in the proof of Theorem [T] we take \tp) = '^^-o \J)- But 
we now choose 

(9) 



A/47r logp 



Then, the entropy of measuring Itp) in the basis A^c is logm and the 
entropy of measuring of measuring Itp) in the basis A4o is logp — logm+10 
(by Lemma [3]). 

We now bound the entropy of measuring \tp) in a basis A4k, k £ 
{l,...,ln^\}. 

Similarly to the proof of Lemma |4j measuring lip) = Sj-o i-^^ 
the basis A4k produces the same probability distribution as measuring 

j-i/i') = ^ basis Aio- We have 

I _2,riM!. , I , „ kf 

e J' — 1 < 2tt-^. 

P 

We can upperbound k by its maximum value, p"^ and j by its maximum 
value, m. By summing over all j £ {0, 1, . . . , m — 1}, we get 

||^_^'|| < 27r^^ < 



21ogp 



The variational distance between the probability distributions obtained 
by measuring and lip') is at most 2\\tp — ip'W < j^^- By Lemma [5] 
this means that the entropies of the two probability distributions differ 
by at most 1 + o(l). Since the entropy of the distribution obtained by 
measuring \tp) in A4q is logp — log m + 10, this means that the entropy of 
the distribution obtained by measuring \tp) in Mk is at most 

logp — log m + 11 + o(l). 

By substituting ^ instead of m, this is at most 

-!-y^logp + o(logp). 

This upperbounds the entropy for Mo, Mi, ... , Af^psj . For Mc, the en- 
tropy is log m < ^-^p. Therefore, the theorem follows. | 
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